Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: Bfb+Zo2jv2eCupi88FzZHZGzu0fSsacEKPPoQDeUXRA=
Subject key identifier: 34:2B:12:E7:CE:7C:AA:54:2C:6D:2A:AE:79:1F:04:5A:22:DD:B1:9C
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 0194BC04AEF06BFA29685EE421FF0999F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0159
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: MWQs7smLM41JWlrIEwmzhqUHVf8.roa (hash: OX5LMdPBdAQfYd3SzSOK+sDVxi0rfkwg65wGbyodCfs=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: ocH2IPPhNHmaZ4bLWn8AKkoKrQhxaV4+YIgbce0K+GQ=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:f0:6b:fa:29:68:5e:e4:21:ff:09:99:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=342b12e7ce7caa542c6d2aae791f045a22ddb19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:1a:f7:6c:b0:ec:5e:44:11:37:82:50:75:
22:80:a8:ad:3c:1b:06:49:6d:da:3a:0d:b1:17:5b:
bc:75:2e:3d:d9:3c:41:95:d8:9d:70:4c:7a:b8:be:
0d:a0:94:fa:01:ed:ea:7b:5d:1d:94:f8:04:4b:85:
02:3a:cb:14:bf:40:c2:a4:e1:95:8e:4a:ec:37:a8:
e9:f7:a2:80:1e:3b:df:49:6f:f0:ab:19:33:08:4d:
ab:ec:68:04:9f:a1:78:73:83:d4:93:e9:8e:45:a8:
a1:a7:2f:da:05:ce:5f:cf:02:03:14:85:2f:6c:6d:
25:10:c4:69:df:0d:8c:a8:ed:7f:91:6d:fe:f7:26:
4d:2c:b1:ef:14:7e:c3:c2:cd:03:06:b8:c2:92:f9:
c7:29:3d:81:b7:cd:39:fe:a9:4d:7b:9a:b5:bf:64:
fe:1d:e5:bb:c6:18:0f:f1:0e:1e:bd:22:ca:6c:3f:
3e:3e:d3:49:02:a7:67:5d:05:8c:cf:5f:fc:e3:b2:
a0:99:a9:ac:92:f3:5a:54:07:29:09:8a:fa:ec:6c:
e8:71:f7:14:f5:6d:ea:7f:85:01:bc:57:91:c0:5d:
e3:4c:1a:c9:b2:a3:b1:89:96:8b:27:2f:ba:07:9e:
a8:ba:a4:a3:4b:5f:df:87:1e:cb:0f:d1:49:75:df:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:12:E7:CE:7C:AA:54:2C:6D:2A:AE:79:1F:04:5A:22:DD:B1:9C
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:b5:3e:1f:3e:13:47:d6:c8:42:4c:ab:86:df:bf:80:ce:
d6:37:51:df:a5:47:dd:04:56:fb:1d:fc:4b:ab:b0:d8:22:87:
63:89:88:fe:49:bf:4b:5d:0d:68:ce:2d:b7:64:6b:db:08:86:
52:03:b3:7a:42:fe:95:24:71:a0:56:70:aa:05:11:d0:f7:99:
ba:05:72:0e:40:d8:68:26:fe:e9:a4:3b:15:aa:77:87:16:db:
8b:9d:ac:6e:72:2c:3c:7a:96:f7:1f:a1:d7:34:fc:91:01:2e:
fe:ca:db:f3:16:02:82:19:52:aa:31:97:a2:2f:b9:88:82:90:
ba:09:3e:71:e6:8f:18:6f:80:7a:30:ef:1d:34:1d:df:75:0b:
a1:e1:f2:39:02:2e:a5:04:55:36:7f:59:b3:49:16:b1:b1:3f:
0e:b4:b0:24:de:db:e0:2f:22:13:7b:d7:29:6a:63:24:18:69:
17:4a:c1:06:46:29:a2:a4:a1:fc:56:b8:64:14:21:a1:6f:ab:
54:af:52:9c:08:18:57:79:33:c4:60:1b:8a:b1:da:c6:06:29:
b9:47:d1:b5:96:14:77:ac:b3:74:4a:ad:da:9d:50:77:eb:3c:
b9:d6:93:83:71:bc:de:73:b4:3a:e3:65:6c:08:e4:f9:82:b5:
df:2e:98:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK7wa/opaF7kIf8JmfP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EygzNDJiMTJlN2NlN2NhYTU0MmM2ZDJhYWU3OTFmMDQ1YTIyZGRiMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtEa92yw7F5EETeCUHUigKitPBsG
SW3aOg2xF1u8dS492TxBldidcEx6uL4NoJT6Ae3qe10dlPgES4UCOssUv0DCpOGV
jkrsN6jp96KAHjvfSW/wqxkzCE2r7GgEn6F4c4PUk+mORaihpy/aBc5fzwIDFIUv
bG0lEMRp3w2MqO1/kW3+9yZNLLHvFH7Dws0DBrjCkvnHKT2Bt805/qlNe5q1v2T+
HeW7xhgP8Q4evSLKbD8+PtNJAqdnXQWMz1/847KgmamskvNaVAcpCYr67GzocfcU
9W3qf4UBvFeRwF3jTBrJsqOxiZaLJy+6B56ouqSjS1/fhx7LD9FJdd9hFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQrEufOfKpULG0qrnkfBFoi3bGcMB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZ21Ph8+
E0fWyEJMq4bfv4DO1jdR36VH3QRW+x38S6uw2CKHY4mI/km/S10NaM4tt2Rr2wiG
UgOzekL+lSRxoFZwqgUR0PeZugVyDkDYaCb+6aQ7Fap3hxbbi52sbnIsPHqW9x+h
1zT8kQEu/srb8xYCghlSqjGXoi+5iIKQugk+ceaPGG+AejDvHTQd33ULoeHyOQIu
pQRVNn9Zs0kWsbE/DrSwJN7b4C8iE3vXKWpjJBhpF0rBBkYpoqSh/Fa4ZBQhoW+r
VK9SnAgYV3kzxGAbirHaxgYpuUfRtZYUd6yzdEqt2p1Qd+s8udaTg3G83nO0OuNl
bAjk+YK13y6YKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:43 2025 by rpki-client